PlzNavigate: Do not disclose urls between cross-origin renderers.

content/common/content_security_policy/csp_context.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/content_security_policy/csp_context.h"
 
 namespace content {
 
 CSPContext::CSPContext() : has_self_(false) {}
 
@@ skipping 48 matching lines @@
 }
 
 const std::string& CSPContext::GetSelfScheme() {
   return self_scheme_;
 }
 
 bool CSPContext::SchemeShouldBypassCSP(const base::StringPiece& scheme) {
   return false;
 }
 
+bool CSPContext::IsOriginSafeToUseInCspViolation(
+    const url::Origin& origin) const {
+  return true;
+}
+
 bool CSPContext::SelfSchemeShouldBypassCsp() {
   if (!has_self_)
     return false;
   return SchemeShouldBypassCSP(self_scheme_);
 }
 
 void CSPContext::ReportContentSecurityPolicyViolation(
     const CSPViolationParams& violation_params) {
   return;
 }
@@ skipping 19 matching lines @@
       disposition(disposition),
       after_redirect(after_redirect),
       source_location(source_location) {}
 
 CSPViolationParams::CSPViolationParams(const CSPViolationParams& other) =
     default;
 
 CSPViolationParams::~CSPViolationParams() {}
 
 }  // namespace content